CVE-2019-12855 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-12855 Interim 1 42 2026-03-05T06:15:15Z current 2021-05-30T14:28:55Z 2026-03-05T06:15:15Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-12855 In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-August/005841.html E-Mail link for SUSE-SU-2019:2212-1 https://lists.suse.com/pipermail/sle-security-updates/2019-September/005962.html E-Mail link for SUSE-SU-2019:2453-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SH7BNY5HAZBZT6SOYNJXKFXH7LVVFMDU/#SH7BNY5HAZBZT6SOYNJXKFXH7LVVFMDU E-Mail link for openSUSE-SU-2019:2068-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RDX7X2CSLBDTL5E77Q6EU2VMZIUQO42C/#RDX7X2CSLBDTL5E77Q6EU2VMZIUQO42C E-Mail link for openSUSE-SU-2019:2110-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Enterprise Storage 4 SUSE Enterprise Storage 5 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 SUSE Package Hub 15 openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Tumbleweed python-Twisted python-Twisted-15.2.1-9.8.1 python-Twisted-doc-17.9.0-bp150.4.6.1 python-Twisted-doc-17.9.0-lp150.2.6.1 python-Twisted-doc-17.9.0-lp151.3.6.1 python-Twisted-doc-21.7.0-3.2 python-Twisted-doc-24.10.0-160000.2.2 python2-Twisted-17.9.0-bp150.4.6.1 python2-Twisted-17.9.0-lp150.2.6.1 python2-Twisted-17.9.0-lp151.3.6.1 python3-Twisted python3-Twisted-17.9.0-bp150.4.6.1 python3-Twisted-17.9.0-lp150.2.6.1 python3-Twisted-17.9.0-lp151.3.6.1 python3-Twisted-19.10.0-3.2.6 python3-Twisted-22.1.0-150400.3.3 python3-Twisted-22.2.0-150400.21.1 python311-Twisted-22.10.0-150400.5.13.1 python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 python311-Twisted-conch-22.10.0-150400.5.13.1 python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 python311-Twisted-contextvars-22.10.0-150400.5.13.1 python311-Twisted-http2-22.10.0-150400.5.13.1 python311-Twisted-serial-22.10.0-150400.5.13.1 python311-Twisted-tls-22.10.0-150400.5.13.1 python313-Twisted-24.10.0-160000.2.2 python313-Twisted-all_non_platform-24.10.0-160000.2.2 python313-Twisted-conch-24.10.0-160000.2.2 python313-Twisted-conch_nacl-24.10.0-160000.2.2 python313-Twisted-contextvars-24.10.0-160000.2.2 python313-Twisted-http2-24.10.0-160000.2.2 python313-Twisted-serial-24.10.0-160000.2.2 python313-Twisted-tls-24.10.0-160000.2.2 python36-Twisted-21.7.0-3.2 python38-Twisted-21.7.0-3.2 python39-Twisted-21.7.0-3.2 python-Twisted-15.2.1-9.8.1 as a component of HPE Helion OpenStack 8 python-Twisted-15.2.1-9.8.1 as a component of SUSE Enterprise Storage 4 python-Twisted-15.2.1-9.8.1 as a component of SUSE Enterprise Storage 5 python311-Twisted-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-conch-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-contextvars-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-http2-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-serial-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-Twisted-tls-22.10.0-150400.5.13.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python3-Twisted-19.10.0-3.2.6 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 python3-Twisted-22.1.0-150400.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 python3-Twisted-22.2.0-150400.21.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 python-Twisted-15.2.1-9.8.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python-Twisted-doc-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-all_non_platform-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-conch-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-conch_nacl-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-contextvars-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-http2-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-serial-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-Twisted-tls-24.10.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python-Twisted-15.2.1-9.8.1 as a component of SUSE OpenStack Cloud 7 python-Twisted-15.2.1-9.8.1 as a component of SUSE OpenStack Cloud 8 python-Twisted-15.2.1-9.8.1 as a component of SUSE OpenStack Cloud 9 python-Twisted-15.2.1-9.8.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-Twisted-15.2.1-9.8.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-Twisted-doc-17.9.0-bp150.4.6.1 as a component of SUSE Package Hub 15 python2-Twisted-17.9.0-bp150.4.6.1 as a component of SUSE Package Hub 15 python3-Twisted-17.9.0-bp150.4.6.1 as a component of SUSE Package Hub 15 python-Twisted-doc-17.9.0-lp150.2.6.1 as a component of openSUSE Leap 15.0 python2-Twisted-17.9.0-lp150.2.6.1 as a component of openSUSE Leap 15.0 python3-Twisted-17.9.0-lp150.2.6.1 as a component of openSUSE Leap 15.0 python-Twisted-doc-17.9.0-lp151.3.6.1 as a component of openSUSE Leap 15.1 python2-Twisted-17.9.0-lp151.3.6.1 as a component of openSUSE Leap 15.1 python3-Twisted-17.9.0-lp151.3.6.1 as a component of openSUSE Leap 15.1 python-Twisted-doc-21.7.0-3.2 as a component of openSUSE Tumbleweed python36-Twisted-21.7.0-3.2 as a component of openSUSE Tumbleweed python38-Twisted-21.7.0-3.2 as a component of openSUSE Tumbleweed python39-Twisted-21.7.0-3.2 as a component of openSUSE Tumbleweed python3-Twisted as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 python-Twisted as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections. CVE-2019-12855 HPE Helion OpenStack 8:python-Twisted-15.2.1-9.8.1 SUSE Enterprise Storage 4:python-Twisted-15.2.1-9.8.1 SUSE Enterprise Storage 5:python-Twisted-15.2.1-9.8.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-all_non_platform-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-conch-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-conch_nacl-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-contextvars-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-http2-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-serial-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-Twisted-tls-22.10.0-150400.5.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:python3-Twisted-19.10.0-3.2.6 SUSE Linux Enterprise Module for Server Applications 15 SP4:python3-Twisted-22.1.0-150400.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:python3-Twisted-22.2.0-150400.21.1 SUSE Linux Enterprise Module for Web and Scripting 12:python-Twisted-15.2.1-9.8.1 SUSE Linux Enterprise Server 16.0:python-Twisted-doc-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-all_non_platform-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-conch-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-conch_nacl-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-contextvars-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-http2-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-serial-24.10.0-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-Twisted-tls-24.10.0-160000.2.2 SUSE OpenStack Cloud 7:python-Twisted-15.2.1-9.8.1 SUSE OpenStack Cloud 8:python-Twisted-15.2.1-9.8.1 SUSE OpenStack Cloud 9:python-Twisted-15.2.1-9.8.1 SUSE OpenStack Cloud Crowbar 8:python-Twisted-15.2.1-9.8.1 SUSE OpenStack Cloud Crowbar 9:python-Twisted-15.2.1-9.8.1 SUSE Package Hub 15:python-Twisted-doc-17.9.0-bp150.4.6.1 SUSE Package Hub 15:python2-Twisted-17.9.0-bp150.4.6.1 SUSE Package Hub 15:python3-Twisted-17.9.0-bp150.4.6.1 openSUSE Leap 15.0:python-Twisted-doc-17.9.0-lp150.2.6.1 openSUSE Leap 15.0:python2-Twisted-17.9.0-lp150.2.6.1 openSUSE Leap 15.0:python3-Twisted-17.9.0-lp150.2.6.1 openSUSE Leap 15.1:python-Twisted-doc-17.9.0-lp151.3.6.1 openSUSE Leap 15.1:python2-Twisted-17.9.0-lp151.3.6.1 openSUSE Leap 15.1:python3-Twisted-17.9.0-lp151.3.6.1 openSUSE Tumbleweed:python-Twisted-doc-21.7.0-3.2 openSUSE Tumbleweed:python36-Twisted-21.7.0-3.2 openSUSE Tumbleweed:python38-Twisted-21.7.0-3.2 openSUSE Tumbleweed:python39-Twisted-21.7.0-3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:python-Twisted SUSE Linux Enterprise Module for Server Applications 15 SP2:python3-Twisted moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N